Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

vulnerability

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

While the vulnerability has not been reported as exploited, it remains a significant risk for self-managed installations. GitLab has released a patch and detection rules to mitigate the issue.

The Hacker News · Oct 21, 2026 HighCVSS 10.0

CVE-2026-110264 CVE-2026-97229 CVE-2026-93577 gitlab vulnerability remote code execution

vulnerability

Max-severity GitLab bug allows remote code execution over 12 years of releases

A GitLab bug, present for over 12 years, has been exploited to allow remote code execution.

The Register · 6d ago CriticalCVSS 10.0Exploited

CVE-2026-110264 gitlab vulnerability remote code execution

vulnerability

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

A vulnerability in Ruby's regular expression engine (Onigmo) has been patched, but applications relying on older versions (3.2 and earlier) remain at risk. These flaws stem from the ability to corrupt memory during regul…

The Hacker News · 5d ago HighCVSS 10.0

CVE-2026-110264 CVE-2026-97229 ruby regex vulnerability

news.mlab.sh

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases